Bug #91420
closed
Story #91384: Backend login and referrer problems after recent TYPO3 9.5.17 and 10.4.2 security fixes
MissingReferrerException TYPO3 v10.4.2
0%
Description
Hi,
a few days ago i installed a new Typo3 Instance (v.10.4.2) and i cannot access the admin panel (/typo3).
The admin panel is asking for my credentials, and after entering my credentials i am getting the error "#1588095935 TYPO3\CMS\Core\Http\Security\MissingReferrerException - Missing referrer for /main".
If i want to access the Install Tool, i am also getting a MissingReferrerException.
I am using a setup with reverse proxy: Client --> nginx reverse proxy --> nginx with typo3
The reverse proxy (nginx) is setting a "same-origin" Referrer-Policy Header.
I already tried to debug and find the problem, but without any success... meanwhile i am pretty sure, that this is a bug.
I had the issue with Firefox 77.0b6, Firefox 68.8.0esr and Chromium 80.0.3987.149.
I already had seen a similar issue with v9.5.17 (https://forge.typo3.org/issues/91414) here. I guess the bug is existing in v10.4.2 as well as in v9.5.17...
Updated by